Monday, 2018-04-16

*** janki has joined #networking-sfc02:45
*** mohankumar has joined #networking-sfc03:54
*** mohankumar has quit IRC04:17
*** mohankumar has joined #networking-sfc06:14
*** jchhatbar has joined #networking-sfc06:29
*** janki has quit IRC06:32
*** mardim has joined #networking-sfc06:47
*** mbuil has joined #networking-sfc08:34
mardimbcafarel, hello how are you09:09
mardim?09:09
mardimbcafarel, I have one question09:09
mardimI creates a chain09:10
mardimcreated*09:10
mardimand the traffic goes trough the chain09:10
mardimbut never reaces the server09:10
mardimreaches09:10
mardimis a nosdn deployment09:10
mardimare you aware of this ?09:10
bcafarelmardim: o/ so you see traffic through the SF ports fine, but not on the end server?09:28
bcafarelI don't think I have seen this behavior09:28
mardimYes exactly09:29
mardimthe traffic ingress the service function but I think never egress09:29
mardimshould the SF be aware of MPLS ?09:29
mardimI mean should the SF encapsulate the packet with MPLS header again ?09:30
mardimbcafarel, ^09:31
bcafarelmardim: depends on the correlation parameter, if None we strip (and later re-add) MPLS09:32
bcafarelthat's still the default I think09:32
bcafarel(correlation on the port pair group, not the chain one)09:32
mardimok let me check09:32
bcafarelmardim: my old demo script https://github.com/voyageur/openstack-scripts/blob/master/simple_sfc_vms.sh mostly default parameters and packets got to the dest VM fine09:35
mardimbcafarel, Ahhh thanks09:40
mardimbcafarel, I think the problem is that the SF doesn't egreess09:40
mardimthe packet form te same interface09:40
mardimDo you know how to do that09:40
mardim?09:40
bcafarelmardim: ah that's a test VM too? I just run some "ip route" commands09:58
mardimbcafarel, Yes I am trying to create a demo for OPenstack summit09:59
mardimDo you know how I instruct the VM to egress the traffic from the same interface that was ingress09:59
mardim?09:59
bcafarelI guess it's not the same network as source/dest then? (else the routing would be correct already)10:00
mardimis the same network10:00
mardimbut by default you cannot egress a packet from the ingress interface10:00
mardimI think the VM just get the packet and then it drops it because the dest ip10:01
mardimis not its ip10:01
bcafarelmardim: ip_forward enabled on the SF? also remember to disable port security10:02
mardimbcafarel, How I enable ip_forward ?10:03
mardimdo I *10:03
bcafarelI used cirros so it was just sudo sh -c 'echo 1 > /proc/sys/net/ipv4/ip_forward' (not permanent but enough for demo)10:03
mardimbcafarel, Ah ok let me try10:04
bcafarelhttps://github.com/voyageur/openstack-scripts/blob/master/simple_sfc_vms.sh#L9510:04
bcafarelthese are the only steps I had (basic VM but it did its job)10:04
mardimbcafarel, ok I will try replicate your demo10:04
mardimbcafarel, Thanks a lot for the help :)10:04
bcafarelnp, hopefully it still works ;)10:05
mardimit will I am sure about that :)10:07
*** trozet has joined #networking-sfc13:07
*** mohankumar has quit IRC14:27
*** geb_ has quit IRC14:43
*** geb has joined #networking-sfc14:45
*** jchhatbar has quit IRC15:32
*** mbuil has quit IRC16:49
gebhi folks17:18
gebI tested  https://github.com/openstack/kolla-ansible/blob/master/contrib/demos/tacker/deploy-tacker-demo-sfc again on pike, it works fine (just had to fetch an older version of this demo because of tosca format change), but still have the same issue in queens  https://pastebin.com/cU68yPMV (L148) & https://pastebin.com/bGqXxYJ6 (end), both installed with kolla17:20
*** openstackgerrit has quit IRC19:05

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!